Traffic Trace Info


DumpFile: 200709291400.dump
FileSize: 1443.96MB
Id: 200709291400
StartTime: Sat Sep 29 14:00:01 2007
EndTime: Sat Sep 29 14:15:01 2007
TotalTime: 899.80 seconds
TotalCapSize: 1128.56MB CapLen: 96 bytes
# of packets: 20665008 (12186.66MB)
AvgRate: 113.61Mbps stddev:13.18M

IP flow (unique src/dst pair) Information

# of flows: 792517 (avg. 26.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.7%

IP address Information

# of IPv4 addresses: 419150
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.5% 11.9% 3.1% 2.5% 2.4% 2.3% 2.3% 2.0% 1.9%
# of IPv6 addresses: 2719
Top 10 bandwidth usage (bytes/total in %):
90.0% 90.0% 2.2% 2.2% 0.9% 0.6% 0.5% 0.5% 0.5% 0.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5050415
 [   64-  127]:    6141879
 [  128-  255]:     777216
 [  256-  511]:     518626
 [  512- 1023]:     493546
 [ 1024- 2047]:    7683326


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20665008 (100.00%)      12778636760 (100.00%)    618.37
 ip            20474131 ( 99.08%)      12601788348 ( 98.62%)    615.50
  tcp          16733922 ( 80.98%)      12001124471 ( 93.92%)    717.17
   http(s)      7351932 ( 35.58%)      10111086278 ( 79.12%)   1375.30
   http(c)      5074859 ( 24.56%)        469600561 (  3.67%)     92.53
   squid         945359 (  4.57%)        376887128 (  2.95%)    398.67
   smtp          462295 (  2.24%)         77114341 (  0.60%)    166.81
   nntp               1 (  0.00%)               74 (  0.00%)     74.00
   ftp            22719 (  0.11%)          2549932 (  0.02%)    112.24
   pop3            9271 (  0.04%)          6122968 (  0.05%)    660.44
   imap            3602 (  0.02%)          1068053 (  0.01%)    296.52
   telnet            58 (  0.00%)             4091 (  0.00%)     70.53
   ssh           601103 (  2.91%)        121353048 (  0.95%)    201.88
   dns             4145 (  0.02%)           289358 (  0.00%)     69.81
   bgp              280 (  0.00%)            65604 (  0.00%)    234.30
   napster            1 (  0.00%)               60 (  0.00%)     60.00
   realaud           10 (  0.00%)             2670 (  0.00%)    267.00
   rtsp          181879 (  0.88%)         97605720 (  0.76%)    536.65
   icecast         8031 (  0.04%)           516059 (  0.00%)     64.26
   other        2068374 ( 10.01%)        736858346 (  5.77%)    356.25
  udp           2779420 ( 13.45%)        506886791 (  3.97%)    182.37
   dns          1721496 (  8.33%)        215734355 (  1.69%)    125.32
   realaud         6612 (  0.03%)          3375200 (  0.03%)    510.47
   halflif           13 (  0.00%)             1804 (  0.00%)    138.77
   starcra           14 (  0.00%)             2143 (  0.00%)    153.07
   everque           59 (  0.00%)            11629 (  0.00%)    197.10
   unreal           146 (  0.00%)            10114 (  0.00%)     69.27
   quake             31 (  0.00%)             2670 (  0.00%)     86.13
   cuseeme            3 (  0.00%)              259 (  0.00%)     86.33
   other        1050885 (  5.09%)        287725060 (  2.25%)    273.79
  icmp           727089 (  3.52%)         62102550 (  0.49%)     85.41
  ipip              333 (  0.00%)            39870 (  0.00%)    119.73
  ipsec             180 (  0.00%)            19800 (  0.00%)    110.00
  ip6              7571 (  0.04%)          4012102 (  0.03%)    529.93
  other          225616 (  1.09%)         27602764 (  0.22%)    122.34
  frag             3941 (  0.02%)          3081955 (  0.02%)    782.02
 ip6             190877 (  0.92%)        176848412 (  1.38%)    926.50
  tcp6           135961 (  0.66%)        167080281 (  1.31%)   1228.88
   http(s)          743 (  0.00%)           739631 (  0.01%)    995.47
   http(c)        13746 (  0.07%)          2019245 (  0.02%)    146.90
   smtp             560 (  0.00%)           142226 (  0.00%)    253.97
   nntp              13 (  0.00%)             1486 (  0.00%)    114.31
   pop3              48 (  0.00%)             4412 (  0.00%)     91.92
   ssh               60 (  0.00%)            10242 (  0.00%)    170.70
   dns               50 (  0.00%)             6718 (  0.00%)    134.36
   bgp              142 (  0.00%)            13980 (  0.00%)     98.45
   rtsp          108823 (  0.53%)        159149697 (  1.25%)   1462.46
   other          11776 (  0.06%)          4992644 (  0.04%)    423.97
  udp6            45854 (  0.22%)          8638571 (  0.07%)    188.39
   dns            42353 (  0.20%)          7951981 (  0.06%)    187.75
   realaud            1 (  0.00%)              456 (  0.00%)    456.00
   starcra           33 (  0.00%)             6635 (  0.00%)    201.06
   everque            5 (  0.00%)              648 (  0.00%)    129.60
   other           3462 (  0.02%)           678851 (  0.01%)    196.09
  icmp6            8805 (  0.04%)          1084869 (  0.01%)    123.21
  ip6               157 (  0.00%)            22465 (  0.00%)    143.09
  pim6               84 (  0.00%)             9304 (  0.00%)    110.76
  other6             16 (  0.00%)            12922 (  0.00%)    807.62


tcpdump file: 200709291400.dump.gz (539.11 MB)